Skip to main content

What happens to your data

Short version: assume we will erase everything, and don’t rely on us to save anything.

Every device with storage is separated at intake and logged. Drives are sanitised to the NIST SP 800-88 Rev. 1 “Purge” standard, or physically destroyed if they can’t be wiped. Nothing leaves our workspace with data on it. Business donors get a written record listing each device and its sanitisation method.

We’re still choosing our recycling partner.

We won’t sign one that isn’t certified to R2v3 or e-Stewards — the two standards the US EPA recognises. When it’s settled we’ll name them here with a link to their listing in the certification directory, so you can check it rather than take our word for it.

Until then this page names nobody. A recycler we haven’t signed is not a recycler, and the whole point of this page is that you can hold us to what it says.

Module 2, lesson 4 of the course explains how to check a recycler’s certification properly. It’s the same check we’re applying to ourselves.

Before you donate: back up anything you want to keep, sign out of your accounts, and turn off Find My / activation lock. A locked phone is scrap to us; an unlocked one is someone’s first phone.